VulnerabilityModified
CVE-2012-4088
The FTP server in Cisco Unified Computing System (UCS) has a hardcoded password for an unspecified user account, which makes it easier for remote attackers to read or modify files by leveraging knowledge of this password, aka Bug ID CSCtg20769.
MEDIUM 4.3EPSS 0.60%
Does this matter?
Lower severity and a low EPSS score (0.60%). Track it; it rarely justifies an emergency change on its own.
Description
The FTP server in Cisco Unified Computing System (UCS) has a hardcoded password for an unspecified user account, which makes it easier for remote attackers to read or modify files by leveraging knowledge of this password, aka Bug ID CSCtg20769.
- CVSS 2.0
- 4.3 MEDIUMAV:A/AC:M/Au:N/C:P/I:P/A:N
- EPSS
- 0.60% probability · 47th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-255
- Affected
- cisco/unified computing system
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/54682
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4088Vendor Advisory
- http://www.securitytracker.com/id/1029102Third Party Advisory, VDB Entry
- http://secunia.com/advisories/54682
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4088Vendor Advisory
- http://www.securitytracker.com/id/1029102Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.